This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/kdakHjkfMiK6hs_O7mI0K8fm-Zg.roa File: kdakHjkfMiK6hs_O7mI0K8fm-Zg.roa (raw, json) Hash identifier: bErHNUOm8rPkqeVKJwew4ScdQ0+M4vjPwa9ckvY5L2s= Subject key identifier: 91:D6:A4:1E:39:1F:32:22:BA:86:CF:CE:EE:62:34:2B:C7:E6:F9:98 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15BDE60E249B0E856CF3B9904F9EED Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/kdakHjkfMiK6hs_O7mI0K8fm-Zg.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 217.147.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bd:e6:0e:24:9b:0e:85:6c:f3:b9:90:4f:9e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91d6a41e391f3222ba86cfceee62342bc7e6f998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dc:c9:14:a5:e5:10:43:78:43:a3:62:f2:44: a3:be:3e:81:4b:81:2f:ef:90:fd:27:d0:ac:7c:f3: d3:25:8a:06:6e:d4:53:1e:61:7b:a1:26:2f:de:f1: ba:09:0e:ad:51:5e:8c:03:0b:26:85:28:0a:ab:5a: 80:b6:c9:84:6c:a1:c1:f6:7e:d9:da:95:7e:e6:12: 90:4a:55:87:55:c6:46:53:b5:70:28:a4:19:e0:84: 37:ad:66:34:c6:34:98:68:81:d3:1c:ed:ea:2c:d7: c6:ba:73:cd:22:12:80:47:db:0b:ef:88:06:31:67: 21:91:eb:67:b4:0a:3d:38:6d:37:c0:56:74:08:11: 84:65:9f:e5:4d:35:e7:23:14:00:cb:ee:f1:00:c2: bb:12:ae:7c:fb:2b:88:6a:c7:d9:ab:f1:9e:42:0d: 82:38:79:dc:91:e7:4f:74:36:f8:72:8d:c0:92:bb: 30:76:7a:dd:01:4d:c8:06:a0:bb:fe:27:dc:65:19: 70:5a:dd:fb:d6:c2:9d:5d:6d:48:31:98:15:52:2b: ee:9e:68:8c:ea:61:d6:f5:5f:30:02:85:f5:ac:c5: 11:87:52:3e:b7:dd:67:f4:53:9d:d5:8f:00:1b:4c: 96:59:1e:a2:cd:b6:f4:7a:f6:3f:f4:a0:af:fe:fb: 32:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D6:A4:1E:39:1F:32:22:BA:86:CF:CE:EE:62:34:2B:C7:E6:F9:98 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/kdakHjkfMiK6hs_O7mI0K8fm-Zg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.14.0/23 Signature Algorithm: sha256WithRSAEncryption 43:74:a8:6f:f1:11:67:52:54:13:3b:a0:e8:94:0f:ef:0a:58: 2a:1a:2d:b9:a8:c2:46:30:74:ff:cc:16:c4:01:9f:9a:8b:d1: 05:15:00:4d:a1:52:8c:ac:58:4b:5b:8c:a9:b2:30:e2:f6:4c: 5f:60:43:85:1f:3b:2e:a9:9c:77:d6:3c:06:fd:46:27:df:14: 8a:39:46:fe:da:d2:7e:87:64:fc:db:a5:12:0c:0b:be:aa:01: 11:89:00:09:30:26:d4:01:81:6c:25:b0:2f:0b:74:70:f4:7f: 20:76:8a:f6:1e:2d:c0:e6:ea:02:a1:bd:49:97:62:b9:c3:dc: 06:4d:55:21:f2:62:7d:88:27:b7:32:cc:fb:69:11:86:57:0a: 2a:53:f8:c8:a6:92:73:eb:10:7f:44:3c:74:06:56:58:df:53: 35:44:10:b4:29:b1:8a:09:81:b2:2d:c0:45:3b:65:5e:c3:8a: 07:ee:7f:e6:42:d3:3f:22:05:80:0b:d3:c8:74:6e:e1:09:2a: 82:28:0d:35:2c:d5:d0:6e:5e:34:6d:7e:ef:de:07:0f:c6:f9: af:7a:e9:66:04:49:21:40:b7:0a:cb:d5:ac:85:05:79:cf:6b: 4a:f2:e7:43:12:06:f6:0b:d9:ad:55:53:a3:86:a2:58:9d:17: 69:3c:58:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fb3mDiSbDoVs87mQT57tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWQ2YTQxZTM5MWYzMjIyYmE4NmNmY2VlZTYyMzQyYmM3ZTZmOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tzJFKXlEEN4Q6Ni8kSjvj6BS4Ev 75D9J9CsfPPTJYoGbtRTHmF7oSYv3vG6CQ6tUV6MAwsmhSgKq1qAtsmEbKHB9n7Z 2pV+5hKQSlWHVcZGU7VwKKQZ4IQ3rWY0xjSYaIHTHO3qLNfGunPNIhKAR9sL74gG MWchketntAo9OG03wFZ0CBGEZZ/lTTXnIxQAy+7xAMK7Eq58+yuIasfZq/GeQg2C OHnckedPdDb4co3AkrswdnrdAU3IBqC7/ifcZRlwWt371sKdXW1IMZgVUivunmiM 6mHW9V8wAoX1rMURh1I+t91n9FOd1Y8AG0yWWR6izbb0evY/9KCv/vsyaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHWpB45HzIiuobPzu5iNCvH5vmYMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEva2Rha0hqa2ZNaUs2aHNfTzdtSTBLOGZtLVpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZMOMA0G CSqGSIb3DQEBCwUAA4IBAQBDdKhv8RFnUlQTO6DolA/vClgqGi25qMJGMHT/zBbE AZ+ai9EFFQBNoVKMrFhLW4ypsjDi9kxfYEOFHzsuqZx31jwG/UYn3xSKOUb+2tJ+ h2T826USDAu+qgERiQAJMCbUAYFsJbAvC3Rw9H8gdor2Hi3A5uoCob1Jl2K5w9wG TVUh8mJ9iCe3Msz7aRGGVwoqU/jIppJz6xB/RDx0BlZY31M1RBC0KbGKCYGyLcBF O2Vew4oH7n/mQtM/IgWAC9PIdG7hCSqCKA01LNXQbl40bX7v3gcPxvmveulmBEkh QLcKy9WshQV5z2tK8udDEgb2C9mtVVOjhqJYnRdpPFjX -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:32 2026 by rpki-client